Ethical Hacking Fundamentals and Hacker Classes ECSS Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which activity is typical of a white hat hacker?

   • AReleasing a zero-day exploit on a public forum
   • BConducting a vulnerability assessment with the client's consent
   • CUsing a botnet to launch DDoS attacks for political reasons
   • DBreaking into a competitor's network to steal trade secrets
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A security analyst is reviewing a series of incidents. In one incident, an attacker exploited a vulnerability, stole data, and sold it. In another, a researcher found a vulnerability, reported it to the vendor, and did not exploit it further. In a third, an individual found a vulnerability, exploited it to prove the risk, and then published the details without vendor consent. How should the analyst classify these three individuals, respectively?

   • ABlack hat, gray hat, white hat
   • BBlack hat, white hat, gray hat
   • CGray hat, white hat, black hat
   • DWhite hat, black hat, gray hat
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security analyst is investigating a data breach. The attacker gained access using stolen credentials, exfiltrated customer data, and then sold the data on a dark web marketplace. The attacker's motive appears to be financial gain. How should the analyst classify this attacker?

   • AState-sponsored hacker, because the attack was sophisticated.
   • BHacktivist, because the attacker targeted a company.
   • CBlack hat hacker, because the attacker acted illegally and with malicious intent for personal gain.
   • DGray hat hacker, because the attacker did not damage the systems.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   How does ethical hacking differ from penetration testing?

   • APenetration testing requires no authorization, while ethical hacking does
   • BEthical hacking only covers network vulnerabilities, while penetration testing covers applications
   • CPenetration testing is always automated, while ethical hacking is manual
   • DEthical hacking is broader and includes all authorized security assessments, while penetration testing is a specific type of test
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which statement accurately describes the scope of penetration testing compared to ethical hacking?

   • APenetration testing is a subset of ethical hacking with identical scope
   • BEthical hacking is limited to passive analysis, while penetration testing is active
   • CPenetration testing has a narrower scope, focusing on actively exploiting vulnerabilities
   • DPenetration testing covers all possible security assessments, including policy review
   Reveal Solution Discussion Select an answer first